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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1. (Currently Amended) A method for encrypting an original document for 
distribution to a selected recipient chosen from a plurality of possible recipients, comprising 
the steps of: 

generating a session key based on a random number privately maintained only 
by the owne r, including an encrvptor, of the original document; 

encrypting the original document with the session key to create an encrypted 

document; 

generating a proxy key based on a public key corresponding to the selected 

recipient; and 

transforming the encrypted document with the proxy key to create a 
transformed m e ssag e document , wherein no clear-text document is revealed during the 
transformation . 

2. (Original) The method of claim 1, further comprising the step of transmitting 
the transformed document to the selected recipient. 

3. (Previously Presented) The method of claim 1, further comprising the steps of: 
recovering the session key from the transformed document; and 
decrypting the transformed document with the session key to recover the 

original document. 

4. (Original) The method of claim 3, wherein the recovering step is performed by 
applying a private key corresponding to the selected recipient. 

5. (Previously Presented) The method of claim 1, wherein the encrypting step is 
performed with a combination of a symmetric private-key encryption scheme and an 
asymmetric public-key encryption scheme. 
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6. (Previously Presented) The method of claim 5, wherein the asymmetric 
public-key encryption scheme is based on the ElGamal cryptosystem. 

7. (Previously Presented) The method of claim 5, wherein the encrypted 
document comprises a first portion representative of the original document encrypted via the 
symmetric private-key encryption scheme using the session key, and a second portion 
representative of the session key encrypted using an owner's private key according to the 
asymmetric public-key encryption scheme. 

8. (Previously Presented) The method of claim 1, wherein the original document 
is distributed to the selected recipient through at least one additional intermediate grantor by 
repeating the following steps for each additional intermediate grantor: 

generating a new proxy key based on the intermediate grantor's public key; 

and 

transforming the encrypted document with the new proxy key to create a 
transformed document customized for the intermediate grantor. 

9. (New) The method of claim 1, wherein the encrypted document has been 
encrypted with a Cramer-Shoup encryption scheme. 

10. (New) The method of claim 5, wherein the encrypted document comprises a 
first portion representative of the original document encrypted via the symmetric private-key 
encryption scheme using the session key, and a second portion representative of the session 
key encrypted using an owner's private key according to the asymmetric public-key 
encryption scheme. 

11. (New) The method of claim 1, wherein the encrypted document has been 
encrypted with a modified ElGamal encryption scheme. 

12. (New) The method of claim 1, wherein the steps of generating a session key, 
encrypting the original document, generating a proxy key, and transforming the encrypted 
document are performed by the grantor. 
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13. (New) A system operable to encrypt an original document for distribution to a 
selected recipient chosen from a plurality of possible recipients, comprising: 

a session key generation system that generates a session key based on a 
random number privately maintained only by the owner, including an encryptor, of the 
original document; 

an encryption system that encrypts the original document with the session key 
to create an encrypted document; 

a proxy key generation system that generates a proxy key based on a public 
key corresponding to the selected recipient; and 

a transformation system that transforms the encrypted document with the 
proxy key to create a transformed document, wherein no clear-text document is revealed 
during the transformation. 

14. (New) The system of claim 13, further comprising a transmitting system that 
transmits the transformed document to the selected recipient. 

15. (New) The system of claim 13, further comprising: 

a recovering system that recovers the session key from the transformed 

document; and 

a decrypting system that decrypts the transformed document with the session 
key to recover the original document. 

16. (New) The system of claim 13, wherein the recovery of the session key is 
performed by applying a private key corresponding to the selected recipient. 

17. (New) The system of claim 13, wherein the encryption is performed with a 
combination of a symmetric private-key encryption scheme and an asymmetric public-key 
encryption scheme. 

18. (New) The system of claim 17, wherein the asymmetric public-key encryption 
scheme is based on the ElGamal cryptosystem. 
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19. (New) The system of claim 17, wherein the encrypted document comprises a 
first portion representative of the original document encrypted via the symmetric private-key 
encryption scheme using the session key, and a second portion representative of the session 
key encrypted using an owner's private key according to the asymmetric public-key 
encryption scheme. 

20. (New) The system of claim 13, wherein the original document is distributed to 
the selected recipient through at least one additional intermediate grantor by using the proxy 
key generation system to generate a new proxy key based on the intermediate grantor's public 
key, and using the transformation system to transform the encrypted document with the new 
proxy key to create a transformed document customized for the intermediate grantor. 

21. (New) The system of claim 13, wherein the encrypted document has been 
encrypted with a Cramer-Shoup encryption scheme. 

22. (New) The system of claim 13, wherein the encrypted document has been 
encrypted with a modified ElGamal encryption scheme. 
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